From 56bda90cf63035584a95e8f619b6054076d60792 Mon Sep 17 00:00:00 2001
From: Sadie Powell
Date: Thu, 12 Mar 2026 10:02:15 +0000
Subject: Fix dereferencing a LocalUserIO that doesn't have a user yet.

---
 modules/websocket.cpp | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'modules/websocket.cpp')

diff --git a/modules/websocket.cpp b/modules/websocket.cpp
index 68cf0fb09..c9d3adc3e 100644
--- a/modules/websocket.cpp
+++ b/modules/websocket.cpp
@@ -427,7 +427,10 @@ class WebSocketHook final
 
 		LocalUser* luser = nullptr;
 		if (sock->type == StreamSocket::SS_USER)
-			luser = reinterpret_cast<LocalUserIO*>(sock)->user;
+		{
+			auto* lio = reinterpret_cast<LocalUserIO*>(sock);
+			luser = lio ? lio->user : nullptr;
+		}
 
 		bool allowedorigin = false;
 		HTTPHeaderFinder originheader;
-- 
cgit v1.3.1-10-gc9f91